AMI

Records69All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical10CVSS 9.0–10.0

CVSS high42CVSS 7.0–8.9

Exploited now

AMI records in CISA KEV

TI-2024-36205 AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability CRITICAL 100KEV 2025-06-25

Components

Products in the NVD configurations · select one to filter the records

Aptio V 30 records HIGH Megarac Sp-x 30 records CRITICAL Megarac Spx 1 record LOW Megarac Spx-12 1 record LOW Megarac Spx-13 1 record LOW

Records

1 record in Megarac Spx · all components

TI-2023-17167 CVE-2023-34335 · GHSA-gjh4-cqh2-hwv6

Authentication bypass in AMI MegaRAC_SPx

LOW 39

AMI BMC contains a vulnerability in the IPMI handler, where an unauthenticated host is allowed to write to a host SPI flash, bypassing secure boot protections.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00393 Published 2023-06-12 Fixed in 13.5 CWE-288

Open these records in search →

Critical	10
High	42
Medium	17
Low	0
No CVSS	0